-
Strong Testimonials Forms Spam Protection: How to Stop Fake Testimonials in WordPress
Strong Testimonials forms are different from normal contact forms. They are not only used to send a message to the site owner. They are used to collect customer feedback, reviews, ratings, names, photos, company details, and testimonial text that may later appear publicly on a website. That makes spam more risky. If fake testimonials are…
FEEDBACK LOG
The Latest
-
Our client’s review: TAILORMADEAFRICA.COM
We continue sharing our clients’ reviews and today’s one is kindly brought to you by our client from tailormadeafrica.com on WordPress. Makes such a huge difference! Since we’ve been using Cleantalk our spam form completions have disappeared! Thank you Cleantalk!Update: We are still using CleanTalk and it has made such a huge difference to the…
-
Plugin Security Certification: “FileBird” – Version 5.5: Secure Media Library Management
In the world of WordPress media library management, one aspect that should never be overlooked is security. The “FileBird” plugin, specifically version 5.5, is not only a powerhouse in organizing your media library but also a guardian of your website’s security. In this article, we delve into how this plugin goes above and beyond in…
-
We Have Reset 178 Passwords That Might Have Been Compromised
While monitoring exposed password databases we found a leaked database that contained 178 compromised credentials of CleanTalk users among other data. These emails/passwords were compromised some time ago and after that were used to create a CleanTalk account by their owners. As soon as we found this potential vulnerability – we immediately reset passwords for…
-
CVE-2023-4795 – Testimonial Slider Shortcode < 1.1.9 - Contributor+ Stored XSS
While evaluating the plugin, we uncovered a vulnerability that permits the execution of Stored Cross-Site Scripting (XSS) on behalf of a contributor. This vulnerability is exploited by inserting a shortcode into a newly created post, potentially resulting in an account takeover. Main info: CVE CVE-2023-4795 Plugin Testimonial Slider Shortcode Critical High Publicly Published September 25,…
